mon symbolic links vulnerability
Published:		09.10.2008
Source:		BUGTRAQ
SecurityVulns ID:		9342
Type:		local
Level:		5/10
Description:		Symbolic links vulnerability on temporary files creation.

Affected:		MON : mon 0.99
CVE:		CVE-2008-4477 (alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.)

Original document

DEBIAN, [SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files (09.10.2008)

Discuss:

Read or add your comments to this news (0 comments)